fix(path-traversal): add regex to prevent path traversal attack

fix(path-traversal): add regex to prevent path traversal attack #4883